UNKNOWN NVD

CVE-2026-85131

The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk actions on its administration screens, an

The WPLP Cookie Consent WordPress plugin before 4.4.4 does not perform CSRF or capability checks when processing bulk actions on its administration screens, and does not restrict the targeted items to its own records, allowing attackers to make a logged in admin permanently delete arbitrary posts and pages via a crafted request.

References

https://wpscan.com/vulnerability/5a94c9c8-5b30-4735-be6b-ced53ff587bc/

Published: 2026-09-16 · Source: NVD · Feed updated: 2026-09-16

This unknown severity vulnerability was published on 2026-09-16 via NVD.

vulnfeed aggregates 14123 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.